CVE-2025-5101

MEDIUM

GitLab < 18.1.5, 18.2 < 18.2.5, 18.3 < 18.3.1 - Authenticated Code Injection via Branch/Tag Ambiguity

Title source: llm
STIX 2.1

Description

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of ambiguity between branches and tags during repository imports.

References (2)

Core 2
Core References
Broken Link issue-tracking permissions-required
https://gitlab.com/gitlab-org/gitlab/-/issues/545165
Permissions Required technical-description exploit permissions-required
https://hackerone.com/reports/3124199

Scores

CVSS v3 5.0
EPSS 0.0003
EPSS Percentile 7.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-94
Status published
Products (2)
gitlab/gitlab 18.3.0 (2 CPE variants)
gitlab/gitlab < 18.1.5 (2 CPE variants)
Published Aug 27, 2025
Tracked Since Feb 18, 2026